yaklang / hack-skills

102 skills260.2k total installsGitHub
npx -y skills add yaklang/hack-skills --agent claude-code
hack3kandroid-pentesting-tricks2.8kcode-obfuscation-deobfuscation2.8ksqli-sql-injection2.8kapi-sec2.8kxss-cross-site-scripting2.8krecon-and-methodology2.7kbusiness-logic-vulnerabilities2.7kssrf-server-side-request-forgery2.7kapi-recon-and-docs2.7kapi-auth-and-jwt-abuse2.7kauthbypass-authentication-flaws2.7kjwt-oauth-token-attacks2.7kwebsocket-security2.6kidor-broken-object-authorization2.6k401-403-bypass-techniques2.6kwaf-bypass-techniques2.6kauth-sec2.6kinjection-checking2.6kkubernetes-pentesting2.6kapi-authorization-and-bola2.6krecon-for-sec2.6kheap-exploitation2.6ktraffic-analysis-pcap2.6kcsrf-cross-site-request-forgery2.6koauth-oidc-misconfiguration2.6kcors-cross-origin-misconfiguration2.6kbusiness-logic-vuln2.6kios-pentesting-tricks2.6kllm-prompt-injection2.6kbinary-protection-bypass2.6kpath-traversal-lfi2.6kanti-debugging-techniques2.6kvm-and-bytecode-reverse2.6kformat-string-exploitation2.6kxxe-xml-external-entity2.6kcmdi-command-injection2.6kgraphql-and-hidden-parameters2.6kfile-access-vuln2.6khttp-parameter-pollution2.6kssti-server-side-template-injection2.6kkernel-exploitation2.5kdeserialization-insecure2.5krequest-smuggling2.5kbrowser-exploitation-v82.5kopen-redirect2.5ksymbolic-execution-tools2.5kinsecure-source-code-management2.5krace-condition2.5kcrlf-injection2.5kweb-cache-deception2.5kdependency-confusion2.5kcsp-bypass-advanced2.5kmobile-ssl-pinning-bypass2.5kexpression-language-injection2.5khttp-host-header-attacks2.5kjndi-injection2.5kcsv-formula-injection2.5kactive-directory-acl-abuse2.5kclickjacking2.5ksubdomain-takeover2.5ksaml-sso-assertion-attacks2.5kactive-directory-kerberos-attacks2.5kactive-directory-certificate-services2.5khash-attack-techniques2.5khttp2-specific-attacks2.5karbitrary-write-to-rce2.5kprototype-pollution2.5klinux-privilege-escalation2.5kdefi-attack-patterns2.5knetwork-protocol-attacks2.5kwindows-av-evasion2.5kai-ml-security2.5kdns-rebinding-attacks2.5klinux-lateral-movement2.5kxslt-injection2.5kdangling-markup-injection2.5ktype-juggling2.5kemail-header-injection2.5kwindows-privilege-escalation2.5klinux-security-bypass2.5kmemory-forensics-volatility2.5kclassical-cipher-analysis2.5ktunneling-and-pivoting2.5kcontainer-escape-techniques2.5kstack-overflow-and-rop2.5kprototype-pollution-advanced2.5ksmart-contract-vulnerabilities2.5klattice-crypto-attacks2.5ksteganography-techniques2.5krsa-attack-techniques2.5ksymmetric-cipher-attacks2.5kwindows-lateral-movement2.5ksandbox-escape-techniques2.5kmacos-security-bypass2.4kntlm-relay-coercion2.4kmacos-process-injection2.4knosql-injection2.4kupload-insecure-files2.4kreverse-shell-techniques2.4kunauthorized-access-common-services2.4kghost-bits-cast-attack2.2k